Merge pull request #837 from complytime/dependabot/github_actions/dot… #253
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Local CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| concurrency: | |
| group: ${{ github.ref }}-${{ github.workflow }}-ci | |
| cancel-in-progress: true | |
| jobs: | |
| project_checks: | |
| name: Run project checks | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Code | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Set up poetry and install | |
| uses: ./.github/actions/setup-poetry | |
| - name: Pre-commit install | |
| run: make pre-commit | |
| - name: Run linting checks | |
| run: make lint | |
| - name: Run security checks | |
| run: make security-check | |
| - name: Check dependencies | |
| run: make dep-cve-check | |
| test: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| python-version: ['3.9', '3.10', '3.11'] | |
| fail-fast: false | |
| steps: | |
| - name: Check out | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Set up poetry and install | |
| uses: ./.github/actions/setup-poetry | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Run tests | |
| run: make test | |
| e2e-test: | |
| runs-on: 'ubuntu-24.04' | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Check out | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: ./.github/actions/e2e-testing | |
| # TEMPORARILY DISABLED: Integration tests depend on complyctl, which is undergoing | |
| # breaking CLI changes (plugin separation, OSCAL artifact cleanup). These tests will | |
| # be re-enabled once complyctl stabilizes. | |
| # | |
| # To re-enable: uncomment the job block below and remove this comment block. | |
| # | |
| # test-integration: | |
| # runs-on: 'ubuntu-24.04' | |
| # permissions: | |
| # contents: read | |
| # steps: | |
| # - name: Check out | |
| # uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| # - uses: ./.github/actions/test-integration |